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(57) Abstract: A device (10) for protecting 
data, comprising a first interface (18) for 
connection to a computing device, a second 
interface for connection to a data storage (20), 
an encryptor (22) located in-h*ne between the 
first interface (18) and the second interface, 
a control system (30), and a memory (24). 
The memory (24) includes program data 
(26) executable on the computing device 
to perform user authentication, the control 
system (30) is configured to initially expose 
the memory (24) to the interface to facilitate 
user aulhcnticalion and to expose the encryptor 
(22) lo the interface only upon successful 
user authentication, and the encryptor (22) 
is operable to encrypl on the fly dala received 
from the first interface (18) and lo forward 
the data once encrypted to the second interface 
and to decrypt on the fly data received from 
the second interface and to forward the data 
once decrypted to the first interface (18). 
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